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Abstract. Does the trace language of a given vector addition system 
(VAS) intersect with a given context-free language? This question lies at 
the heart of several verification questions involving recursive programs 
with integer parameters. In particular, it is equivalent to the coverability 
problem for VAS that operate on a pushdown stack. We show decidability 
in dimension one, based on an analysis of a new model called grammar- 
controlled vector addition systems. 


1 Introduction 

Pushdown systems are a well-known and natural formalization of recursive 
programs. Vector addition systems (VAS) are widely used to model concurrent 
systems and programs with integer variables. Pushdown vector addition systems 
(pushdown VAS) combine the two: They are VAS extended with a pushdown 
stack and allow to model, for instance, asynchronous programs [6] and, more 
generally, programs with recursion and integer variables. 

Despite the model’s relevance for automatic program verification, most classi¬ 
cal model-checking problems are so far only partially solved. Termination and 
boundedness are decidable but their complexity is open [12]. Coverability and 
reachability are known to be TowER-hard [9], but their decidability is open. In 
fact, reachability and the seemingly simpler coverability problem are essentially 
the same for pushdown VAS: there is a simple logarithmic-space reduction from 
reachability to coverability that only adds one extra dimension. 

Contributions. Our main result is that coverability is decidable for 1-dimensional 
pushdown VAS. We work with a new grammar-based model called grammar- 
controlled vector addition systems (GVAS), which amounts to VAS restricted 
to firing sequences defined by a context-free grammar. In dimension one, this 
model corresponds to two-stack pushdown systems where one of the two stacks 
uses a single stack symbol. To prove our main result, we show that it is enough 
to check finitely many potential certificates of coverability. The latter are parse 
trees of the context-free grammar annotated with counter information from 
the 1-dimensional VAS. We truncate these annotated parse trees thanks to an 

* This work was partially supported by ANR project ReacHard (ANR-11-BS02-001). 
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analysis of the asymptotic behavior of the summary function induced by the 
1-dimensional GVAS. Asymptotically-linear summary functions are shown to be 
effectively Presburger-definable, which makes the above truncation effective. 

Related work. This paper continues a line of research that investigates the 
limitations of extending VAS while preserving the decidability of important 
verification questions, such as reachability, coverability and boundedness. 

The coverability and boundedness problems for ordinary VAS are long known 
to be ExpSPACE-complete [14,16] and reachability is decidable [15,8,11]. In recent 
years, several extensions of VAS have been considered with respect to decidability 
and complexity of reachability problems. For instance, Reinhardt [17] showed 
that reachability remains decidable for VAS in which one dimension can be tested 
for zero. Branching VAS introduce split-transitions and can be interpreted as 
bottom-up or top-down tree acceptors. Alternating VAS add a limited form 
of alternation where only one player is affected by the counters. Coverability 
and boundedness in these models are 2-ExpTiME-complete [5,4], reachability is 
TowER-hard for branching and undecidable for alternating VAS [10,4]. 

Closer to this paper is the work of Bouajjani, Habermehl and Mayr [3], 
who study a model called BPA(Z). These are context-free grammars where 
nonterminals carry an integer parameter that can be evaluated and passed on when 
applying a production rule. They show how to compute a symbolic representation 
of the reachability set. Their formalism, like the 1-dimensional CVAS considered 
here, can model recursive programs with one integer variable. But while BPA(Z) 
allows arbitrary Presburger-definable operations on the variable, it cannot model 
return values. 

Atig and Canty [1] also study the context-free restriction of the reachability 
relation in vector addition systems. Instead of restricting the dimension of the VAS, 
they restrict the context-free language and show that reachability is decidable 
for the subclass of indexed context-free languages. 

Outline. We first recall some background and notation for context-free grammars. 
Section 3 formally introduces grammar-controlled vector addition systems, their 
coverability problem and the required technology to solve it in dimension one. 
In Section 4, we show the existence of small certificates. These are subsequently 
proved to be recursive in two steps. Section 5 shows that, for so-called thin CVAS, 
the step relation is effectively Presburger-definable. Then, summary functions 
are shown to be computable by reduction to the thin case in Section 6. 

2 Preliminaries 

We let M =' M U {—oo, -l-oo} denote the extended real number line and use the 
standard extensions of -I- and < to K. Recall that (K, <) is a complete lattice. 
1 = {—c», -|-oo} and N = N U {—oo, -|-oo} denote the (complete) sublattices 

of extended integers and extended natural numbers, respectively.^ 
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Words. Let A* be the set of all finite words over the alphabet A. The empty word 
is denoted by s. We write |w| for the length of a word w in A* and = ww ■ ■ -w 
for its fc-fold concatenation. The prefix partial order A over words is defined by 
u ^ V if V = uw for some word w. We write m ^ v if u is a proper prefix of n. A 
language is a subset L C A*. A language L is said to be prefix-closed if m A n 
and V G L implies u G L. 

Trees. A tree T is a finite prefix-closed subset of N* satisfying the property that 
if tj is in T then ti in T for all i < j. Elements of T are called nodes. Its root is 
the empty word e. An ancestor of a node < is a prefix s A t. A child of a node t 
in T is a node tj in T with j in N. A node is called a leaf if it has no child, and 
is said to be internal otherwise. The size of a tree T is its cardinal |T|, its height 
is the maximal length |t| for any of its nodes t G T. 

Context-free Grammars. A context-free grammar is a triple G = {V,A,R), 
where V and A are disjoint finite sets of nonterminal and terminal symbols, 
and R C V X {V LI A)* is a finite set of production rules. The degree of G is 
max{|Q;| I (A, a) G R}. We write 


X \- ai \ a2 \ ■.. \ ctk 


to denote that (A, ai),..., (A, a^) € R. For all words w,w' G (V U A)*, the 
grammar admits a derivation step w w' if there exist two words u, v in 
(V U A)* and a production rule (A, a) in R such that w = uXv and w' = uav. 
Let ==> denote the reflexive and transitive closure of =4>. The language of a 
word w in (E U A)* is the set Lg = {z G A* \ w z}. A nonterminal A is said 
to be derivable from a word w € (E U A)* if there exists u,v G (E U A)* such 
that w uXv. A nonterminal A € E is called productive if 7 ^ 0. 

Parse Trees. A parse tree for a context-free grammar G = (V, A, R) is a tree T 
equipped with a labeling function sym : T —)• (EU AU {e}) such that R contains 
the production rule sym{t) h sym{tO) • • • sym(tk) for every internal node t with 
children tO,..., tk. In addition, each leaf t e with sym{t) = £ is the only child 
of its parent. Notice that sym{t) G V for every internal node t. A parse tree is 
called complete when sym{t) G (Au{e}) for every leaf t. The yield of a parse tree 
(T, sym) is the word sym{ti) ■ ■ ■ sym{ti) where ti,... ,tf, are the leaves of T in 
lexicographic order (informally, from left to right). Observe that S w, where 
S = sym{e) is the label of the root and w is the yield. Conversely, a parse tree 
with root labeled by S and yield w can be associated to any derivation S w. 

3 Grammar-Controlled Vector Addition Systems 

We first recall the main concepts of vector addition systems. Fix k G N. A 
fc-dimensional vector addition system (shortly, k-VAS) is a finite set A Qlf 
of actions. Its operational semantics is given by the binary step relations —^ 
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over N^, where a ranges over A, defined by c d if d = c + a. The step 
relations are extended to words and languages as expected: —^ is the identity, 

o —^ for z G A* and a G A, and —^ = Uzgl ^ ^ For 

every word z = Oi • • • a/j in A* , we let ^ z denote the sum ai + ■ ■ ■ + a^- Notice 

that c d implies d — c = ^ z, for every c, d G N^. 

The VAS reachability problem asks, given a fc-VAS A and vectors c, d G 

A* 

whether c -d. This problem is known to be ExpSPACE-hard [14], but no 

upper bound has been established yet. The VAS coverability problem asks, given 

, A* 

a fc-VAS A and vectors c, d G N'', whether c- d' for some vector d' > d. 

This problem is known to be ExpSPACE-complete [14,16]. 

Definition 3.1 (GVAS). A k -dimensional grammar-controlled vector addition 
system (shortly, k-GYAS) is a context-free grammar G = {V,A,R) with AG-Tf. 

We give the semantics of GVAS by extending the binary step relations of 
VAS to words over V U A. Formally, for every word w G {V U A)*, we let 
—^ ^ where L = is the language of w. The GVAS reachability problem 

asks, given a fc-GVAS G = {V,A,R), a nonterminal S' G V and two vectors 

c,d G N'=, whether c ^ d. The GE4S coverability problem asks, given the 
same input, whether c —>■ d' for some vector d' > d. These problems can 
equivalently be rephrased in terms of VAS that have access to a pushdown stack, 
called stack VAS in [9] and pushdown VAS in [12]. Lazic [9] showed a Tower 
lower bound for these two problems, by simulating bounded Minsky machines. 
Their decidability remains open. As remarked in [9], GVAS reachability can be 
reduced to GVAS coverability. Indeed, a simple “budget” construction allows 
to reduce, in logarithmic space, the reachability problem for fc-GVAS to the 
coverability problem for (k -f 1)-GVAS. This induces a hierarchy of decision 
problems, consisting of, alternatingly, coverability and reachability for growing 
dimension. The decidability of all these problems is open. This motivates the 
study of the most simple case: the coverability problem in dimension one, which 
is the focus of this paper. Our main contribution is the following result. 

Theorem 3.2. The coverability problem is decidable for 1-GVAS. 

For the remainder of the paper, we restrict our attention to the dimension 
one, and shortly write GVAS instead of 1-GVAS. Every GVAS can be effectively 
normalized, by removing non-productive nonterminals, replacing terminals a G Z 
by words over the alphabet {—1, 0,1}, and enforcing, through zero padding (since 
is the identity relation), that |a| > 2 for some production rule A h a. So in 
order to simplify our proofs, we consider w.l.o.g. only GVAS of this simpler form. 

Assumption. We restrict our attention to GVAS G = {V, A, R) where every 
A G V is productive, where A = { — 1,0,1}, and of degree > 2. 

We associate to a GVAS G and a word w G {VGA)* the displacement G Z 
and the summary function cr® : N —> N defined by 


Ag = suplX;^: I e Lg} 


(T®(n) = supjd I 3c < n : c d} 


On Coverability for Pushdown VAS in One Dimension 


5 


Informally, A'^ is the “best shift” achievable by a word in gives 

the “largest” number that is reachable via some word in starting from n or 
below. When no such number exists, cr^(n) is —oo (recall that sup0 = —oo). 
Since all nonterminals are productive, the language is not empty. Therefore, 
A^ > —oo and (n) > —oo for some n G N. 


Remark 3.3 (Monotonicity). For every re G (F U A)* and c, d, e G N, c d 
implies c + e d + e. Consequently, cr^(n + e) > cr^^n) + e holds for every 
w G (F U A)*, n G N and e G N. 


A straightforward application of Parikh’s theorem shows that is effectively 
computable from G and w. We will provide in Section 6 an effective characteriza¬ 
tion of cr^ when the displacement is finite. In order to characterize functions 
cr^ where the displacement A^ is infinite, it will be useful to consider the ratio 
of w, defined as 


A 


G 

w 


def 


lim inf 

n—>-+oo 



n 


Notice that > 1. This fact follows from Remark 3.3 and the observation that 
(T^(n) > —oo for some n G N. From now on, we just write d, and 

Xw when G is clear from the context. 


Example 3.). Multiplication by 2 can be expressed as a summary function using 
the GVAS with production rules 15'11 |e. Indeed, for every c. 


c —d 


3n G N : c ^ ^ 


dn < c : c - > c — n - > c + n = d 


c < d < 2c 


Therefore, crs(n) = 2n for every n G N. Observe that As = d-oo and As = 2. □ 

Example 3.5. The Ackermann functions A^ : N —>■ N, for m G N, are defined by 
induction for every n G N by: 


AM = 



if m = 0 
if m > 0 


These functions are expressible as summary functions for the GVAS with nontermi¬ 
nals Vq, ..., Xm and with production rules Xq h I and Xi h —I Xi Xi-i \ IXi-i 
for 1 < i < TO. It is routinely checked that ux^iri) = Am{n) for every n G N. 
Notice also that A^o = 1) Axi = 2, and Xx^ = +oo for every to > 2. □ 

Lemma 3.6. For every two words u,v G (F U A)* , the following properties hold: 

1. Aliy Ay Ay Ond (Tyy (Jy O (Ty . 

2. If u =d> V then Ay > Ay, Xy > Xy, and <Ty(n) > <Jy{n) for all n G N. 

An equivalent formulation of the coverability problem is the question whether 
o's(c) ^ d holds, given a nonterminal S' G F and two numbers c, d G N. We solve 
this problem by exhibiting small certificates for as{c) > d, that take the form of 
(suitably truncated) annotated parse trees. 
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4 Small Coverability Certificates 

To solve the coverability problem, we annotate parse trees in a way that is 
consistent with the summary functions. A flow tree for a GVAS G is a parse 
tree (T, sym) for G equipped with two functions in, out : T ^ N, assigning an 
input and an output value to each node, and satisfying, for every node t G T, the 
following flow conditions: 

1. If t is internal with children tO,... ,tk, then in(tO) < in(t), out{t) < outitk), 
and in{t{j + 1)) < out{tj) for every j = 0 ,..., fc — 1. 

2. If t is a leaf then out(t) < <Jsym{t){'i'n{t)). 

We shortly write t : cfl^d to mean that {in{t), sym{t), out{t)) = (c, #, d). A flow 
tree is called complete when the underlying parse tree is complete, i.e., when 
sym{t) € (A U {e}) for every leaf t. The following lemmas state useful properties 
of flow trees that can be shown using the flow conditions and the monotonicity 
of summary functions (see Remark 3.3). A consequence is that crs(c) > d holds 
if, and only if, there exists a complete flow tree with root e : cSd. 

Lemma 4.1. It holds that <t^{c) > d for every node t : cffd of a flow tree. 

Lemma 4.2. Let S gV and c, d S N. If crs{c) > d then there exists a complete 
flow tree with root e : bSe such that b < c and e > d. 

We will need to compare flow trees. Let the rank of a flow tree (T, sym, in, out) 
be the pair in{t) + out{t)). The lexicographic order ^lex over is 

used to compare ranks of flow trees. A complete flow tree (T, sym, in, out) is 
called optimal if there exists no complete flow tree (T', sym', in', out') of strictly 
smaller rank such that in'{e) < in^e), sym{e) = sym^e), and out'(e) > out^e). 
Optimal flow trees enjoy the following important properties, stated formally 
below. Firstly, they are tight, meaning that the inequalities in the first flow 
condition are in fact equalities. Secondly, they are balanced, meaning that the 
input value of each node is never too large compared to its output value. 

Lemma 4.3. For every internal node t in an optimal complete flow tree, we have 
in{t0) = in(t), in(tl) = out{t0), ..., inftk) = out{t{k—l)), and out{t) = out{tk), 
where tO,... ,tk are the children of t. 

Lemma 4.4. For every node t in an optimal complete flow tree, it holds that 
in{t) < out{t) + . 

Next, we show how to truncate flow trees while preserving enough information 
to decide that the in and out labelings satisfy the flow conditions. Our truncation 
is justified by the following lemma. 

Lemma 4.5. Let X G V and n G N. If Xx = +oo and there is a derivation 
X uXv such that cr„(n) > n, then it holds that <Jx(n) = +oo. 
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Definition 4.6 (Certificates). A certificate is a flow tree (T, symfln, out) in 
which every leaf t with Xsym(t) = +oo has a proper ancestor s ^ t such that 
sym{s) = sym(t) and in(s) < inlt). 

Notice that every complete flow tree is a certificate. We now prove the 
existence of small certificates. Let S & V and c, d S N such that crs(c) > d. We 
introduce the set T of all complete flow trees with root e : bSe satisfying b < c 
and e > d. By Lemma 4.2, the set T is not empty. Let us pick (T, sym, in, out) 
in T among those of least rank. By definition, the root £ of T satisfies in(e) < c 
and out(e) = d. Notice that the complete flow tree T is optimal. Let us introduce 
the set U of all nodes t G T such that every proper ancestor s ^ t satisfies the 
following condition: 

For every ancestor r s, sym{r) = sym{s) in(r) > in{s) (1) 

By definition, the set 17 is a nonempty and prefix-closed subset of T. The following 
fact derives from Lemma 4.1 and the property that T is a complete flow tree. 

Fact 4-7. The tree U, equipped with the restrictions to U of the functions sym, 
in and out, is a certificate. 

Our next step is to bound the height of U as well as the input and output 
values of its nodes. We will use the following properties, that are easily derived 
from the definition of U, the optimality of T, and Lemmas 4.3 and 4.4. 

Fact 4-8. Let r and s be nodes in U such that r ^ s. 

1. If s is internal in U and sym{r) = sym{s) then out{s) < out(r), and 

2. If s is a child of r then out{s) < out{r) -I- (5 — 

Consider a leaf t in U. For each i in {0,..., |t|}, let ti denote the unique 
prefix ti <t with length \ti\ = i, and let (#i, di) = {symfli), out{ti)). Note that 
do = out{e) = d. Fact 4.8 entails that for every i,j with 0 < *, j < |f|, 

di+i < di + and (i < j A #* = #j) > dj (2) 

Let mi = max{do, ■ ■ ■ ,di} for all i G {0, ...,|t|}. According to Equation (2), 
increasing pairs mi < rui+i may occur in the sequence mo,..., m\t\ only when 
#i+i ^ {# 0 ) • ■ ■) #i} or j -I- 1 = |t|. So there are at most \V\ such increasing 
pairs. Moreover, for each increasing pair m^ < m^+i, the increase m^+i — m^ is 
bounded by We derive that di < m\t\ < d + \V\ ■ < d + for 

all i with 0 < f < \t\, since 5 > 2 by assumption. It follows from Equation (2) 
that each nonterminal in V appears at most d -|- times in the sequence 

(#j)o<i<|t|. By the pigeonhole principle, we get that |t| < |I7| • {d + (5^1^!+^). We 
have thus shown that for every node t G U, 

|t| < d • |I7|-I-and in{t) + out{f) < 2d + (3) 

This concludes the proof of the “only if” direction of the following proposition. 
The “if” direction follows from Lemma 4.1, since every certificate is a flow tree. 
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Proposition 4.9. For every S G V and c,d gN, it holds that as{c) > d if, and 
only if there exists a certificate with root e : bSd for some b < c and whose nodes 
t satisfy Equation (3). 

The above proposition leads to a simple procedure to solve the coverability 
problem, as we only need to enumerate finitely many potential certificates. 
Checking whether an annotated parse tree is a certificate reduces to (a) the 
question whether a given nonterminal X has an infinite ratio, and (b) the 
coverability question crx(c) > d for nonterminals X with finite ratio. Both 
questions will be shown to be decidable in Section 6 by reduction to the subclass 
of thin GVAS, which is the focus of the next section. 

5 Semilinearity of the Step Relations for Thin GVAS 

We turn to reachability relations in a particular subclass of GVAS called thin. A 
context-free grammar is said to be thin^ a G A*VA* for every production rule 
X \- a such that X is derivable from a. Recall that Presburger arithmetic is the 
first-order theory of the natural numbers with addition. It is well-known that 
semilinear sets coincide with the sets definable in Presburger arithmetic [7] . 

Theorem 5.1. For every nonterminal symbol S of a thin GVAS, the relation 

g 

—>■ is effectively definable in Presburger arithmetic. 

Our argument goes by a reduction to the reachability problem for 2-dimen- 
sional vector addition systems, and uses the following result. 

Theorem 5.2 ([13]). Let A be a 2-VAS and 11 C A* be a regular language over 
its actions. The relation is effectively definable in the Presburger arithmetic. 

Let us call a GVAS G = {V, A, R) simple if for every production rule X \- a, 
either X is not derivable from a, or a G AVA. Clearly, every simple GVAS is 
thin. Conversely, every thin GVAS can be transformed into an equivalent simple 
GVAS by replacing production rules in V x A* VA* by finitely many new rules 
in V X AVA. See Lemma D.l in Appendix D for details. Consequently, it suffices 
to show the claim of Theorem 5.1 for simple GVAS only. 

g 

We show by induction on |V| that —^ is effectively definable in Presburger 
arithmetic for every simple thin GVAS G = (V, A, R) , and for every nonterminal 
S G V. Naturally, if \V\ is empty the proof is immediate. Assume the induction is 
proved for a number h gN, and let us consider a simple thin GVAS G = (V, A, R) 
with \V\ = h + 1, and a nonterminal S G V. 

Notice that A = {—1,0,1}^ is a vector addition system. We consider the 
finite, directed graph with set of nodes V that contains an (a, —6)-labeled edge 

Thinness entails that for any derivation S =G’ w, the number of nonterminals in w is 
bounded by This entails that parse trees of thin GVAS are of bounded width. 
Thin GVAS are thus a subclass of the finite-index grammars of [1] . 
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from XtoY for every production rule X h aYb in R. To each nonterminal X € 
we associate the regular language IIx of words recognized by this finite graph 
starting from S and reaching X. By Theorem 5.2, the regular restriction 

of the reachability set of A, is effectively dehnable in Presburger arithmetic. 

As a next ingredient, let Fx be the finite set of words a G (P U A)* such 
that X h a is a production rule and X is not derivable from a. We observe that 
if is equal to the language of a in the simple grammar G', obtained from G 
by removing the nonterminal X and all production rules where X occurs. By 
induction, and since —> are trivially Presburger-dehnable for terminals o G A, we 
deduce that —> is effectively Presburger-dehnable as a composition of Presburger 
relations. Because Fx is hnite, we deduce that = Uagr^ dehnable 

in the Presburger arithmetic as a hnite disjunction of Presburger relations. 

This following Lemma 5.3 concludes Theorem 5.1. 

g 

Lemma 5.3. For for all c, d G N, c —> d if, and only if, the following relation 
holds: 

cj)s{c, d) = \J 3c', d' G N (c, d) (c', d') A c' d' (4) 

x&v 

Proof. Assume that c —> d. It means that there exists w G Ls such that 
c —> d. Since w G A*, we deduce that a sequence of derivation steps from S 
that produces w must necessarily derive at some point a nonterminal symbol 
X with a production rule X \- a such that a G A*, and in particular a G Fx- 
By considering the hrst time a derivation step X with a G Fx occurs, we 
deduce a sequence Xq, ..., Xk of nonterminal symbols with Xg = S, a sequence 
ri,..., Tfc of production rules rj G R oi the form Xj_i h OjXjbj with aj,bj G A, 
a production rule rk+i G R oi the form Xk b a where a G Fx,., and a word 
w' G La such that w = ai... Ukw'bk ■ ■ - bi. Since c d, it follows that there 
exist c',d' G N such that c p d' d. Thus (c, d) {c',d') 

with TT (oi, —6 i)... (ofc, —6fc). It follows that (j)s{c,d) holds. Conversely, if 

g 

4>s{c, d) holds, by reversing the previous proof steps, if follows that c —^ d. A 
detailed proof is given in Appendix D. □ 

6 Computation of Summaries for Bounded Ratios 

In this section, we show that the summary function ax is effectively computable 
when the ratio Ax is finite. In addition, the question whether Ax is finite is 
shown to be decidable. These results are ultimately obtained by reduction to the 
thin GVAS case. We first consider nonterminals with finite displacements. 

The next lemma follows from the observation that if the maximal displacement 
of a nonterminal is finite, then it can already be achieved by a short word. 

Lemma 6.1. Let S G V be a nonterminal with As < -l-oo. Then it holds that 
as{n) = n + As for every n G N such that n > . 
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Proposition 6.2. For every nonterminal S € V with As < +cx), the function 
0 ’S is effectively computable. 

The following lemma will be useful in our reduction below. 

Lemma 6.3. Let X G V be a nonterminal. If there is a derivation X uXv 
such that Auv = +oo then it holds that Xx = +oo. 

We will now show that summaries are computable for nonterminals with finite 
ratio. The main idea is to transform the given GVAS into an equivalent thin 
GVAS, by hard-coding the effect of nonterminals with finite displacement. This 
is effective due to Proposition 6.2. Computability of Ax and ax then follows 
from Theorem 5.1. The following ad-hoc notion of equivalence is sufficient for 
this purpose. Crucially, it has no requirement for nonterminals with infinite ratio. 

Two GVAS G = {V, A, R) and G' = {V', A', R') are called equivalent if firstly 
V = V', secondly A® = A^ for every nonterminal X, and thirdly ax = a^ for 
every nonterminal X with finite ratio. 

Unfoldings. For our first transformation, assume a nonterminal X G V with 
Ax < -foo. The unfolding of X is the GVAS H = (V, A, R') where R' is obtained 
from R by removing all production rules X \- a and instead adding, for every 
0 < i < with j = ax(i) > —oo, a rule X h (—1)®(1)'’. 

Observe that the language is finite, and that H can be computed from G 
and X because tr^ is computable by Proposition 6.2. 

Fact 6 . 4 . The unfolding of X is equivalent to G. 

Expansions. Our second transformation completely inlines a given nonterminal 
with finite language. Given a nonterminal Y € V with Ly finite, the expansion 
of Y is the GVAS H = (V, A, R') where R' is obtained from R by replacing each 
production rule X h afYai •• - Yak, with Y not occurring in oq • • • a/c, by the 
rules X h agziai ■ ■ ■ ZkO-k where zi,... ,Zk € Ly. Note that H can be computed 
from G and Y. Obviously, languages are preserved by this transformation, i.e., 
for every w in (V U A)*. The following fact follows. 

Fact 6.5. The expansion of Y is equivalent to G. 

Abstractions. Our last transformation simplifies a given nonterminal with infinite 
ratio, in such a way that its ratio remains infinite. Given a nonterminal X G V 
with Xx = -foo, the abstraction of X is the GVAS H — (V, A U {!}, i?') where R' 
is obtained from R by removing all production rules Aha and replacing them 
by the two rules X h lA | e. Note that H can be computed from G and A. 

Fact 6.6. The abstraction of A is equivalent to G. 

We now show how to effectively transform a GVAS into an equivalent thin 
GVAS. As a first step, we hard-code the effect of nonterminals with finite 
displacement into the production rules, using unfoldings and expansions described 
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above. By Facts 6.4 and 6.5, this results in an equivalent GVAS. Moreover, it 
now holds that every nonterminal Y occurring on the right handside a of some 
production rule X \- a has Ay = +oo. Let {V,A,R) be the constructed GVAS 
and assume that it is not already thin. This means that there exists a production 
rule Aha with a ^ A*VA* such that A is derivable from a. So A uXv for 
some words u,v in (V U A)* such that uv contains some nonterminal Y. As Y 
occurs on the right handside of the initial production rule, it must have an infinite 
displacement. From Lemma 3.6 we thus get that also A^v = +oo, and Lemma 6.3 
lets us conclude that Ax = +oo. Therefore, by Fact 6.6, we may replace G by the 
abstraction of A. Observe that this strictly decreases the number of production 
rules violating the condition for the system to be thin and at the same time it 
preserves the property that Ay = +oo for every V € V occurring in the right 
handside a production rule. By iterating this abstraction process, we obtain a 
thin GVAS that is equivalent to the GVAS that we started with. We have thus 
shown the following proposition. Its corollary follows from Theorem 5.1, and 
states the missing ingredients for the proof of the coverability problem. 

Proposition 6.7. For every GVAS G, there exists an effectively constructable 
thin GVAS that is equivalent to G. 

Corollary 6.8. The question whether Ax < +oo holds for a given GVAS G and 
a given nonterminal A, is decidable. Moreover, if Ax < +oo then the function 
o'x is effectively computable. 

Proof (of Theorem 3.2). Thanks to Proposition 4.9, it suffices to check finitely 
many candidate certificates, each consisting of a parse tree (T, sym) of bounded 
height and labeling functions in, out : T —> N with bounded values. It remains to 
show that it is possible to verify that a given candidate is in fact a certificate. For 
this, it needs to satisfy the two flow conditions from page 6 and moreover, every 
leaf t with Xsym(t) = +oo must have some ancestor s ^ t with sym{s) = sym{t) 
and in{s) < in(t). 

The first flow condition can easily be verified locally. By Corollary 6.8, it is 
possible to check if \sym(t) < +oo for every leaf t and therefore verify the third 
condition. In order to verify the second flow condition, it suffices to check that 
syra{t){in{t)) > out(t) holds for all leaves with finite ratio \sym(t) < +oo. This 
is effective due to Corollary 6.8. Indeed, if none of the above checks fail then it 
follows from Lemma 4.5 that <Jsyra(t){in{t)) > outif) necessarily holds also for 
the remaining leaves t with Xsym{t) = +oo (see Lemma E.3 in Appendix E for 
details). This means that the candidate satisfies the second flow condition and 
therefore all requirements for a certificate. □ 

7 Conclusion 

The decidability of the coverability problem for pushdown VAS is a long-standing 
open question with applications for program verification. In this paper, we proved 
that coverability is decidable for 1-dimensional pushdown VAS. We reformulated 
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the problem to the equivalent coverability problem for 1-dimensional grammar- 
controlled vector addition systems, and analyzed their behavior in terms of 
structural properties of derivation trees. 

An NP lower complexity bound can be shown by reduction from the Subset 
Sum problem. A closer inspection of our approach allows to derive an ExpSpace 
upper bound, using recent results by Blondin et al. [2] on 2-dimensional VAS 
reachability. The exact complexity is open, and so is the decidability of the 
problem for larger dimensions. 
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A Elementary Parse Trees 

Let G = {V,A,R) be a context-free grammar. A parse tree {T,sym) for G is 
called elementary^ if it contains no two nodes s ^ t with sym{s) = sym(t). A 
flow tree (see Section 4) shall be called elementary when the underlying parse 
tree is elementary. 

Remark A.l. If the degree 5 of G is nonzero, then every elementary parse tree 
has at most leaves. 

B Proofs for Section 3 

Lemma 3.6. For every two words u,v G (T U A)*, the following properties hold: 

1, Aliy Ay Ay Ond (Tyy (J y O (Ty . 

2. If u V then Ay > Ay, Xy > A„, and <Jy(n) > <Jy(n) for all n S N. 

Proof. Let u,v G (F U A)*. For the proof of part 1), recall that and are 
non-empty, since all nonterminals are productive. We derive from the definition 
of the displacement that: 

Ay + Ay = SUplX; Z I Z G Lyj + SUpf^^ Z j Z G Ly} 

- SUpl yf Zy -j- y ] Zy I Zy G Ly A Zy G Ly^ 

- SUpl ZyZy I Zy G Ly A Zy G L y^ 

= SUp{^ Z \ Z G Lyy^ [Lyy = LyLy^ 

- Ayy 

Let n G N and let us show that ayy{n) = tT„ o (jy{n). Assume that c d 
with c < n. There exists c' such that c c' d. Observe that c' < ay{n). 
It follows from the definition of ay that d < cr„((T„(n)). We have shown that 
<^yv{n) < ay o ay{n). Conversely, suppose that d —^ d with d < ay{n). By 
definition of fT„(n), there exists c < n and d' > d such that c d'. We get 
that c —^ d' d" for some d” > d. Observe that d" < ayy{n). It follows that 
d < ayy{n). We have shown that ay o ay(n) < (T„„(n). 

We now prove point 2. Assume that u v, and let n G N. Observe that 
Ly A Ly. Therefore, it holds that {^z \ z G Ly} D | z G Ly} and that 

{d I 3c < n : c d} D {d | 3c < n : c —% d}. The first inclusion entails that 
Ay > Ay, and the second inclusion entails that ay{n) > ay(n). The last assertion, 
namely Xy > Xy, follows from the fact that CT„(n) > ayin) for all n G N. □ 

C Proofs for Section 4 

Lemma 4.1. It holds that a,g,{d) > d for every node t : cffd of a flow tree. 
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Proof. Let (T, sym, in, out) be a flow tree. We prove the claim by structural 
induction on T. For leaf nodes t, the claim holds by the second flow requirement. 
For internal nodes t : cXd, assume that the claim holds for the children tO,... ,tk 
of t. Suppose that tj : Cjffjdj for all j with 0 < j < k. Since X =4> #o ■ ■ • #fe, 
Lemma 3.6 implies that ax(n) > o ■ ■ ■ o a:y,g(n) for all n G N. By the first 
flow requirement, it holds that cq < c, ci < do) • ■ • > Ck < dk-i, and d < dk- We 
derive from the monotonicity of summary functions (see Remark 3.3) that 


CTx(c) > cr#, 0---ocr#o(co) 

> cr#, 0---Ocr#,(ci) 

> Cr#JCfc) 

> d 


[c > Co] 

[ct#o(co) >do> Cl] 
[ct#,(cj ) > dj > Cj+i] 

W#kick) >dk>d] 


By induction, we conclude that the lemma holds for every node of T. □ 

Lemma 4.2. Let S €V and c, d S N. If as{c) > d then there exists a complete 
flow tree with root e : bSe such that b < c and e > d. 

Proof. Assume that as{c) > d. This means that there exists e > d such that 

S w 

c —> e, which in turn means that there exists w S Ls such that c —> e. Since 

w G Ls, there exists a derivation S =4> w, hence, a complete parse tree with root 

labeled by S and yield w. This parse tree, together with the fact that c e, 

induces a complete flow tree with root e : cSe. □ 

Lemma 4.3. For every internal node t in an optimal complete flow tree, we have 
in{tO) = in(t), in(tl) = out{tO), ..., inftk) = out{t{k—l)), and outff) = out{tk), 
where tO,... ,tk are the children of t. 

Proof. The first flow condition requires in(tO) < in(t), in(tl) < out{tO), ..., 
initk) < out(t{k — 1)), and out(t) < out{tk), for every internal node t with 
children tO,... ,tk. For the converse inequalities, assume that in{tO) < in{t) (the 
other cases are analogous). Then, changing the labeling of the node t using 
in{t) := in{tO) provides a complete flow tree of strictly smaller rank, contrary to 
the optimality of T. □ 

Lemma 4.4. For every node t in an optimal complete flow tree, it holds that 
in{t) < out{f) + . 

Proof. Let (T, sym, in, out) be an optimal complete flow tree. We only prove the 
lemma for the root e ; cffd, since every subtree of an optimal complete flow tree 
is also an optimal complete flow tree. Let <i,..., with f : CiOidi, denote the 
leaves of T in lexicographic order (informally, from left to right). 

We first show that c — d < £. Note that oi,..., are in {A U {e}) since 
(T, sym) is a complete parse tree. It holds that A C {—1,0,1} by assumption. 
We derive that cja. (di + 1) > di for all i with \ < i < £. The optimality of T 
entails that Ci < di + 1. Indeed, if Ci > di + 1 for some i then we would obtain a 
complete flow tree of lesser rank by changing the labeling of the node ti using 
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initi) := di + 1. This would contradict the optimality of T. By Lemma 4.3, it 
holds that ci = c and = d. It also follows from Lemma 4.3 that di = c^+i for 
all i with 1 < i < £. We get that c — d = Ci — dg = {ci — di) + ■ ■ ■ + {cg — dg) < 1. 

We now prove that c < d + Assume towards a contradiction that 
c > d + It follows that T has ^ leaves. We derive from Remark A.l 

that (T, sym) is not elementary. By iteratively collapsing® nodes s ^ t with 
sym{s) = sym(t), we obtain a complete and elementary parse tree (T\ sym') 
with \T'\ < |T|. The root labeling is preserved by this transformation, that is 
sym'{e) = #. Since {T',sym') is elementary, it contains at most leaves. 
Therefore, it induces a complete flow tree (T', sym', in', out') satisfying in'{s) = 
d + and out'{e) > d. We obtain that, in'[e) < in{e), sym{e) = sym{e), and 
out'(e) > out{e). This contradicts the optimality of T. □ 

Lemma 4.5. Let X G V and n € N. // Ax = +oo and there is a derivation 
X =4> uXv such that <Tu{n) > n, then it holds that ax(n) = +oo. 

Proof. Assume that Ax = +oo and that there exists u,v G {V LI A)* such that 
X uXv and (Juin) > n. Since every nonterminal is productive, there exists 
5 G N such that cr^( 6 ) > 0. By Remark 3.3, we derive that {(jy)^{m + kb) > m 
for every k,m G N. Similarly, since ^^(n) > n + 1, we get from Remark 3.3 
that (cr„)^(n) > n + fc for every fc G N. Define A = & + 1. Since A < Ax = +oo, 
there exists mo G N such that ax(rn) > X ■ m for all m > mo. For every fc G N 
with k > mo, it holds that X u^Xv^, which entails, by monotonicity of the 


summary functions, that 



crx(n) > 

(^) 

[Lemma 3.6] 

= 

CTyk O (J X ^ (^) 

[Lemma 3.6] 

> 

ayk o ax{n + k) 


> 

(jyk (A • (n + k)) 


= 

ayk (X ■ n + k + kb) 

[A = 5 + 1] 

> 

X ■ n + k 



We have thus shown that (Jx{n) > k for every k gN with k > mg. We conclude 
that ax{n) = +oo. □ 

The two following facts are part of the proof of Proposition 4.9. Recall that, in 
the context of this proof, (T, sym, in, out) is a complete flow tree that is optimal, 
and that U is the set of all nodes t G T such that every proper ancestor s ^ t 
satisfies Equation (1), which is copied below: 

For every ancestor r P s, sym{r) = sym{s) in(r) > in{s) 

Fact 4-7. The tree U, equipped with the restrictions to U of the functions sym, 
in and out, is a certificate. 

® Collapsing two nodes s ^ t consists in replacing the subtree rooted in s by the subtree 
rooted in t. 
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Proof. It follows from U CT and Lemma 4.1 that 17 is a flow tree. Let us show 
that every leaf of U satisfies the condition of Definition 4.6. Let t be a leaf of U 
such that Xsym.{t) = +oo. Since (T, sym) is a complete parse tree, every leaf u of 
T verifies sym{u) G U {e}), hence, Xsym{u) = 1- It follows that t has a child u 
in T. But u as otherwise t would be internal in U. So there exists a proper 
ancestor s < u that violates Equation (1). Since t itself is in U, we get that s = t. 
We derive that there exists an ancestor r of s = t such that sym(r) = symit) 
and in(r) < in(f). □ 

Fact 4-8. Let r and s be nodes in U such that r < s. 

1. If s is internal in U and sym{r) = sym{s) then out{s) < out{r), and 

2. If s is a child of r then out{s) < out{r) + (5 — 

Proof. Let us start with the first assertion. By contradiction, assume that s is 
internal in U, sym{r) = sym{s) and out{s) > outir). Since s is internal in U, 
s is the proper ancestor of some node in U, hence, s verifies Equation (1). We 
derive that m(s) < in(r). Observe that the subtree of T rooted in r contains 
more nodes than the subtree of T rooted in s. It follows that the subtree of T 
rooted in r is not optimal, which contradicts the optimality of T. The second 
assertion is easily derived from Lemmas 4.3 and 4.4, the observation that r has 
at most 5 children, and the fact that T is optimal. □ 

D Proofs for Section 5 

Lemma D.l. For every thin GVAS G = (V, A,i?) one can construct a simple 
GVAS G' = (W, A', R') such that V GV' and = Lg for all S G V. 

Proof. We assume that 0 G A. Let us consider a production rule X \- a with 
a = ai... QiYbj .. .bi where Y G V, and Oi ..., a^, ,..., 6i is a sequence of 

terminal symbols in A. We let m > I be a positive integer such that i,j < m. 
Define a^+i,..., Om and 6m, ■ ■ •, 6j+i to be 0, and introduce fresh nonterminal 
symbols Tfi,..., X^-i- The production rule X h a is then replaced by the 
production rules Xj-i h OjXjbj where I < j < m, Xq = X, and X^ = Y. Just 
observe that such a transformation let the language Ls unchanged. □ 

g 

Lemma 5.3. For for all c, d G N, c —> d if, and only if, the following relation 
holds: 

(j)s{c, d) = y 3c', d' G N (c, d) (c', d') A c' d' (4) 

xev 

g 

Proof. To see this, fix any two numbers c, d G N. Assume first that c —d. It 
means that there exists a word w G Lg such that c d. Since w is a word over 
the terminal symbols, we deduce that a sequence of derivation steps from S that 
produces w must necessarily derive at some point a nonterminal symbol X with 
a production rule X \- a such that a G A*, and in particular a G Fx- 
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By considering the first time that a derivation step X => with a G Fx 
occurs, we deduce that all the previous derivation steps replace nonterminal 
symbols by words in AVA. We extract a sequence Xg ,... ,Xk of nonterminal 
symbols with Xg = S, a sequence ri,..., of production rules rj G R oi the 
form Xj-i h UjXjbj with aj,bj S A, a production rule r^+i G R oi the form 
Xk b a where a G Fx,. , and a word w' G La such that: 


w = ai ... Qkw'bk . ■ .bi (5) 

Since c d, we derive that there exists a sequence Cg.. .Ck G N and a 
sequence dk, ■ ■ ■ ,dg G N satisfying the following relation. 

C = Co —Cl • • • — Ck — dk — dk-i ■ ■ ■ —dg = d (6) 


This is true if, and only if, in the 2-VAS A, there exists a path 

(c, d) = (co,do) (ci,di) • • • {ck,dk) (7) 


Let c' Cfc, d' dfc, and X = Xk- Observe that tt = (oi, —&i)... (a*,, —bk) is 
a word in IIx such that (c, d) (c', d'). Moreover, from c' d' we get that 

c' d'. Together this means that (j)s{c, d) is true. 

Conversely, assume that ^s(c, d) holds. Since ips{c,d) is a finite disjunction, 

there exist X gV and c, d, c', d' S N such that (c, d) (c', d') and d d!. 

Let us consider a word tt G Fix of the form tt = (oi, —bi )... (a^, —bk) such 

that (c, d) —^ {d,d'). We also introduce a word a G Fx such that d d'. 

This last relation shows that there exists w' G Lg{ol) such that d d'. From 
(c, d) -dFf (c', d') we derive a sequence (cq, dg ),..., (cfc, dk) of pairs in N x N such 
that (cfc, dk) = {d , d') and such that relation (7) and thus (6) hold. Hence, c d 

where w is the word satisfying (5). Since w G Ls, it follows that c —> d. □ 

E Proofs for Section 6 

By definition of the displacement, if As < +oo, then there exists a word w G Ls 
such that As = '^w. The following lemma provides a way to bound the length 
of such a word w. 

Lemma E.l. For every nonterminal S G V with As < +oo, there is a complete 
elementary parse tree with root labeled by S and yield w G A* such that As = 

Y,w. 

Proof. Since As < +oo, there exists a complete parse tree with root labeled by 
S and yield w G A* such that '^w = As- Let (T, sym) be such a parse tree 
with the fewest possible number of nodes and assume towards a contradiction 
that T is not elementary. This means there exists s ^ t in T and X G V such 
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that sym{s) = X = sym{t). The subtree rooted in s provides a derivation 
X uXv for two words u,v in A*. Notice that + > 0 then 

Ax = + 00 . Then, Lemma 3.6 implies that As > A^xv = A^ + Ax + Ay = +(X), 
which contradicts the assumption of the lemma. Therefore, < 0. 

By collapsing the subtree {t' G T \ s A t' A t t'}, we get a new parse 
tree {T',sym') with \T'\ < |T|, sym'^e) = S and yield w' G A* satisfying 
= ~ (S u + ^S- Since clearly, ic' G Ls, by definition 

of the displacement it holds that 'Y^w' < As and therefore that 'Y^w' = As- 
This contradicts our assumed minimality of T. Hence T is elementary. □ 

The corollary below follows from Lemma E.l and the observation (Remark A.l) 
that the yield of an elementary parse tree is a word of length bounded by 

Corollary E.2. For every nonterminal S € V with As < +oo, and for every 
c G N with c > there exists a complete elementary flow tree with root e : cSd 
such that d = c + As- 

Proof. According to Lemma E.l, there exists a complete elementary parse tree 
(T, sym) with root labeled by S and yield w G A* such that As = Y'^- Since this 
parse tree is elementary, it has no more than leaves. Hence, |?c| < < c, 

which entails that c —^ c+As since A = {—1, 0, 1 } by assumption. It is routinely 
checked that the parse tree (T, sym) induces a complete elementary flow tree 
with root e : cSd^ where d = c + As- □ 

Lemma 6.1. Let S G V be a nonterminal with As < +oo. Then it holds that 
asin) = n + As for every n G N such that n > . 

Proof. Observe that as{n) < n + As holds for every S G V and n G N. The 
remaining inequality follows from Corollary E.2 and Lemma 4.1. □ 

Proposition 6.2. For every nonterminal S G V with As < +oo, the function 
0 'S is effectively computable. 

Proof. Let S gV with As < Too, and let c G N. Observe that cts(c) < c + As. 
Therefore, the computation of crs(c) reduces to the question whether cts(c) > d, 
given d G N. To decide the latter, we show that fTs(c) > d if, and only if, there 
exists a complete flow tree with root e : bSe satisfying b < c and e > d, and of 
height bounded by h = \V\ ■ + 1). The “if” direction follows from Lemma 4.1 

and the monotonicity of the summary function as. Eor the “only if” direction, 
assume that as(c) > d. By Lemma 4.2, there exists a complete flow tree with root 
e : bSe satisfying b < c and e > d. Pick one, say (T, sym, in, out), that contains 
the least number of nodes t gT with \t\ > h. We show that, in fact, T contains no 
such node. Since As < +oo, we derive from Lemma 3.6 that Asym{r) < +oo for 
every node r G T. Now, consider a leaf t in T. Assume, towards a contradiction, 
that |t| > h. The main observation is that for every two nodes r,s G T, 

r A s < t A sym{r) = sym{s) m(r) ^ in{s) ( 8 ) 


Eor if this were not the case, then 
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— either out{r) < out{s), in which case we could replace the subtree rooted in 
r by the subtree rooted in s, contradicting the minimality assumption on T. 

— or out{r) > out(s), which would entail, with the same reasoning as in the 

proof of Lemma E.l, that = +oo, which is impossible. 

By the pigeonhole principle, it follows from Equation ( 8 ) that there exists an 
ancestor s such that |s| < \V\ and in{s) > The height of the subtree 
rooted in s is strictly larger than |E|, since t is in it. Because Asym(s) < +oo, 
we can use Corollary E.2 and replace, without violating the flow conditions as 
out{s) < m{s) + the subtree rooted in s by a complete flow tree of 

height at most \V\. This contradicts the minimality assumption on T. 

The observation that in{t) and out{t) are both bounded by in{e)+6^ for every 
node t of a complete flow tree of height h concludes the proof the proposition. □ 

Lemma 6.3. Let X £ V be a nonterminal. If there is a derivation X uXv 
such that Auv = +oo then it holds that Xx = +oo. 

Proof. Assume that X =4> uXv with = +oo. Let A S M with A > 1, and 
let us show that Ajc > A. It is routinely checked that, since Auv = +oo, there 
exists fi S {J2 z \ z £ Lu} and v € {J2 z j z € Ly} such that Ap + i/ > 0 and 
IJ. + V > 1. Observe that > fj., Ax > 0 and Z\„ > i/. Therefore, there exists 
m G N such that auirn) > m + /i, axim) > m and av{m) > m + y. \t follows 
from Remark 3.3 that these inequalities hold for all n > m as well. Let n, fc G N 
such that n> m and n + kfa > m. Note that n + kfj, + kv > m since /r + z/ > 1. 
Since X u^Xv^, we get, by monotonicity of the summary functions, that 


ax {n) > ayk o ax o ayk (n) 


[Lemma 3.6] 


> aykoaxin + k^) 

> auk{n + kfi) 

> n + kn + kv 

> n + fc • max{l, p(l — A)} 


[fi + h' > I A Xfi + v > 0] 


If p > 0 then, for every fc G N, it holds that n + kfj, > m, hence, axin) > n + k. 
We derive that axin) = +oo for every n > m, which entails that Xx = +oo. 
Otherwise, /r < 0. Take k = and let r = n — m + fc/r. Observe that 

0 < r < — 1. Since n + fc/i > m, we get that axin) > n — fc^(A — 1) from the 

above inequalities. We derive that axin) > An + (A — l)(/r + 1 — m) for every 
n> m, which entails that Xx > A. □ 

We now show that the transformations used in our reduction to thin GVAS 
are indeed correct, i.e., produce equivalent systems. Recall that two GVAS 
G = (V, A, i?) and G' = iV',A',R') are called equivalent if firstly V = V', 
secondly A^ = A® for every nonterminal A, and thirdly a^ = a^ for every 
nonterminal X with finite ratio. 

Fact 6 . 4 . The unfolding of X is equivalent to G. 
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Proof. Recall that the unfolding of a nonterminal X with < +oo, is the 
GVAS H = {V, A, R') where R' is obtained from R by removing all production 
rules X\- a and instead adding, for every 0 < * < with j = > —oo, a 

rule Ah (-!)*( 1 )A 

We first prove that = <Jx- First note that (t^(— oo) = tT^(—oo) = —oo 
and (T^(+oo) = cr;^(+oo) = +oo. Let n S N. By definition of iJ, we get that 
(T^(n) = max{n—i+CT^(t) | 0 < * < Ai < n}. It follows from Remark 3.3 that 
a^{n) = n—m+a^(m) where to = min{<5l^l, n}. If n < then we immediately 
get that cr^{n) = a^{n). Otherwise, n > and <7^(n) = n — + cr^(5l^l). 

We derive from Lemma 6.1 that a^in) = a^{n). 

We now prove that cr® = ag for every nonterminal S. Let c, d S N. Assume 
that CTg (c) > d. By Lemma 4.2, there exists a complete flow tree (T, sym, in, out) 
for G with root e : cSd. Let U denote the set of all nodes t gT such that every 
proper ancestor s < t verifies sym{s) ^ X. By definition, the set t/ is a nonempty 
and prefix-closed subset of T. Moreover, symft) ^ X for each internal node t of 
U, and sym{t) G ({A} U A) for each leaf t of U. It follows that C/ is a flow tree 
for H, since tr^ = tr^ for every # G ({A} U A). Note that the root of U also 
satisfies e : cSd. We derive from Lemma 4.1 that ag (c) > d. 

Conversely, the same reasoning as above shows that ag (c) > d implies 
0 's (c) > d. We have thus shown that ag {c) > d ^ ag (c) > d, for every c, d G N. 
It follows that ag = ag . By definition of the ratio, we also get that Xg = Xg. □ 

Fact 6.6. The abstraction of A is equivalent to G. 

Proof. Recall that the the abstraction of a nonterminal X G V with = -l-oo, 
is the GVAS H = {V,AU {!}, R') where R' is obtained from R by removing all 
production rules Aha and replacing them by the two rules A h lA | e. 

Let Dx denote the set of nonterminals S G V such that A is derivable from 
S in G. Note that Dx is also the set of nonterminals S G V such that A is 
derivable from S in id. Recall that A® = -l-oo. By definition of id, it holds that 
Xx = -too. It follows from Lemma 3.6 that Xg = Xg = -too for every S G Dx. 

Now consider a nonterminal S ^ Dx- It is readily seen that G and id have the 
same derivations S w starting from S. Therefore, = Lg . It follows that 
ag = ag . By definition of the ratio, we also get that Xg = Xg . The observation 
that every nonterminal with finite ratio is in V \ Dx concludes the proof. □ 

Corollary 6.8. The question whether Xx < +oo holds for a given GVAS G and 
a given nonterminal X, is decidable. Moreover, if Xx < +oo then the function 
o'x is effectively computable. 

Proof. By Proposition 6.7, it is enough show the claim for thin GVAS. Let us 
consider a thin GVAS G = {V,A,R) and a nonterminal X gV. By Theorem 5.1, 
the relation —> is effectively definable in Presburger arithmetic. Therefore, so is 
the set Ex{n) A {d | 3c < n : c —d}, for any given n G N. We derive that its 
supremum ax{n) = sup Ax(n) is computable. 
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We now prove that the question whether Ax < +oo is decidable. Since the 
relation —> is effectively definable in Presburger arithmetic, it is effectively 
semilinear [7]. This means that we can compute a finite family {{bi, Pi)}i^j of 
vectors bi in and finite subsets Pi of with Pi = {p ],... such that 

^ = Ue/ {b i + Npl + • • • + We consider two cases. 

— If there exists i G I and a vector p in IJ^gj Pi such that p(l) = 0 and 

p(2) > 0, then 6i(l) (bi(2) + kp{2)) for every fc £ N. It follows that 

crx(bi(l)) = + 00 , which entails, by monotonicity of ax-, that Ax = +oo. 

— Otherwise, there exists A G K with A > 1 such that p(2) < Ap(l) for every 
vector p in Pi. Define b = max{bi(2) | i £ /}. It is routinely checked 

that d < Xc + b for every c, d with c —> d. We derive that ax (n) < Xn + b 
for every n £ N, which implies that Ax < A. 

We have shown that Ax = +oo if, and only if, there exists p in IJjgj' Pi with 
p(l) = 0 and p(2) > 0. The latter condition is decidable, and so is the former. □ 

Lemma E.3. Let {T,sym) be a parse tree and let in^ out : T —>■ N. Then 
(T, sym, in, out) is a certificate if the three following conditions hold: 

(i) All internal nodes satisfy the first flow condition, 

(ii) Every leaf t £ T with Xsym(t) < +oo satisfies the second flow condition, and 
(Hi) Every leaft £ T with Xsym{t) = +oo has a proper ancestor s ^ t such that 
sym(s) = sym{t) and in{s) < in{f). 

Proof. Assume that {i)-{iii) hold. We only need to show that every leaf of T 
satisfies the second flow condition. By contradiction, assume that T contains a leaf 
t with out{t) -f: agym{t){.'i'^{t))■ It follows from [ii) and (Hi) that Xsym(t) = +oo and 
that t has a proper ancestor s ^t such that sym{s) = sym(t) and in{s) < in{t). 
Let ti,... ,ti, with ti : Ciffidi, denote the leaves of the subtree of T rooted in 
s, in lexicographic order (informally, from left to right). Obviously, t = tk for 
some fc in {1,..., £}. We may suppose, without loss of generality, that ti,..., tk-i 
satisfy the second flow condition. This means that di < a,y,fici) for all i with 
1 < i < k. Since every internal node satisfies the first flow condition, it holds 
that in{s) > ci and di > Ci+i for all i with I < i < k. We derive from the 
monotonicity of summary functions that 


a#,...#,_fiin{s)) = a#^_, o ■ ■ ■ o a#fiin{s)) 

[Lemma 3.6] 

> o---oa#fici) 

[m(s) > Cl] 

> Ck 

[o-#i(ci) >di> Ci+i] 

> in{s) 

[cfe = in(t) > m(s)] 

Define w = #i • • • ffk-i, X = sym{s) = #fc, and v 

= #fc+i • ■ • ffi- Recall that 


ti,... ,t( are the leaves, in lexicographic order, of the subtree of T rooted in 
s. Therefore, we have the derivation X => uXv. We obtain from Lemma 4.5 
that ax{in{s)) = +oo. Since in(t) > in{s), we get that ax{in{t)) = +oo, which 
contradicts our assumption that out(t) ^ ax{in(t)). □ 


